[CLC] Clarify list of maintainers

[hasufell]

Hi,

given that I'm currently doing an inventory of maintenance status of core libraries as the CLC chair, I noticed that there is no definite list of maintainers for cabal... or I simply haven't found any.

On hackage, the maintainer is cabal-devel at haskell.org, which is rather ambiguous. The hackage accounts that have access to Cabal are: AndresLoeh, BenGamari, DuncanCoutts, HerbertValerioRiedel, MikhailGlushenkov, MikolajKonarski, fffaaa, phadej, Bodigrim, topos, ArtemPelenitsyn, hecate, geekosaur

So for the sake of clarity, I'd like to know:

• who exactly are the active maintainers of cabal?
• do all the accounts listed above still need hackage access to Cabal? (for the sake of avoiding supply chain attacks, the list of access should be updated frequently)

If you're unaware, cabal and its libraries have been added as core libraries in 2024: https://groups.google.com/g/haskell-core-libraries/c/vqyNHUeNC2E/m/HRcL1-J9AQAJ?pli=1

CLC needs to maintain a clear point of contact with all the libraries and have a way to assess whether maintenance is in a healthy state.

[geekosaur]

I wish you luck; nobody wanted to commit during the proposals discussion. ☹️

[ulysses4ever]

I think we can come up with something relatively easily. I volunteered to act on this two weeks ago but haven't gotten around to doing it. I'll try to do better in the coming days.

[emilypi]

I'm a passive maintainer, and i have a key to the cabal kingdom for updates if need be. however, as far as up to date active maintainers go, @Kleidukos and @Mikolaj would probably be the best contacts right now per my knowledge for that info.

[ulysses4ever]

the list of currently active maintainers is being composed here: #11195

[ulysses4ever]

Let's cleanup the Hackage record before declaring it closed. I purpose to synchronize Hackage with the list of people in MAINTAINERS.md that we just merged. Opinions?

[ffaf1]

It seems sensible and would address one of the points raised by the CLC. Il 04 settembre 2025 alle 17:57 Artem Pelenitsyn ha scritto:

…

ulysses4ever left a comment (haskell/cabal#11193) Let's cleanup the Hackage record before declaring it closed. I purpose to synchronize Hackage with the list of people in MAINTAINERS.md that we just merged. Opinions? -- Reply to this email directly or view it on GitHub: #11193 (comment) You are receiving this because you are subscribed to this thread. Message ID: ***@***.***>

[ulysses4ever]

And the same would probably make sense for GitHub admins?

@Mikolaj @geekosaur?

[ffaf1]

I would be less quick to modify GitHub stuff: I recall permissions were granted for specific tasks an alas sometimes GitHub is not as granular as we would like it to be. Not to say we cannot change it, but we would need to write down some sort of “manifest” before, while for Hackage I do not think the change would lead to any particular problem. Il 05 settembre 2025 alle 09:05 Artem Pelenitsyn ha scritto:

…

ulysses4ever left a comment (haskell/cabal#11193) And the same would probably make sense for GitHub admins? @Mikolaj @geekosaur? -- Reply to this email directly or view it on GitHub: #11193 (comment) You are receiving this because you commented. Message ID: ***@***.***>

[geekosaur]

I could be removed from the GitHub list if someone else takes over the webhook. Someone else with admin rights would need to copy the webhook configuration and recreate it afterwards.

[geekosaur]

I'm otherwise fine with cleanup and in fact think it's a good idea from a security perspective.

[ulysses4ever]

@Mikolaj gentle ping

Let's cleanup the Hackage record before declaring it closed. I purpose to synchronize Hackage with the list of people in MAINTAINERS.md that we just merged. Opinions?

And the same would probably make sense for GitHub admins?

[Mikolaj]

Let's talk tomorrow?

I'm in favour of not extending either of the two lists beyond MAINTAINERS.md for security reasons, but it's less clear to me we should trim, because having the authority may make people more likely to help at the time of crisis (for both practical and sentimental reasons) and remember cabal fondly in general.